It is a process used to identify and create a list of software programs, applications, blocked IP addresses, senders that have developed malicious activities, like phishing or spam. They all can be included in a firewall solution and not allowed to execute or connect for safety reasons.